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IN THE SPECIFICATION 

Please amend paragraph 0 03 8 as follows: 
--The method implemented by the invalidity- 
monitoring server 10 shown in FIG. 1, and the invalidity- 
monitoring program 11 shown in FIG. 2 for determining 
invalidity will be explained in further detail using FIG. 
4 and FIG. 5. FIG. 4 shows a determination method in 
which rules according to user attributes are added to 
general rules for determining invalidity, and FIG. 5 
shows a system in which not only is determination 
performed on a rule basis, but in which operating 
patterns are determined from profiles of each user, and 
invalidity is determined when there is an unusual 
operation. -- 

Please amend paragraph 0052 as follows: 
--In the embodiments explained above, 
processing is executed to block a session when an 
operation is determined to be an invalid operation, and 
in the case of execution-processing data over an 
externally connected bus, processing is executed such as 
stopping a print out, or stopping writing to an external 
disc; however, construction could also be such that when 
an operation is determined to be an invalid operation, a 
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warning is sent to the user executing that operation or 
to the computer or network administrator .- - 

Please amend paragraph 0053 as follows: 
--The basic flow of the invalidity-monitoring 
program of the invention will be explained using the 
flowchart shown in FIG. 8 FIGS. 8A &. B . First, the 
program acquires input/output data that is flowing on the 
network or externally connected bus, and the ID of the 
operator that executed the operation related to that 
input/output data SOI. For the acquired ID, the program 
references the user database that stores user attribute 
information S02, and when that ID does not exist in the 
user database S03, determines that operation is by an 
unauthorized party, and executes processing to stop the 
operation related to that input/output data S08.-- 
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